{
  flake.modules.nixos.base = {
    services = {
      fwupd.enable = true;
      locate.enable = true;
      openssh.enable = false;

      pipewire = {
        enable = true;
        alsa.enable = true;
        alsa.support32Bit = true;
        pulse.enable = true;
      };
    };

    security.rtkit.enable = true;

    # ssh-agent user service (SSH_AUTH_SOCK=%t/ssh-agent)
    programs.ssh.startAgent = true;
  };
}